This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/y9kIUKoRWMPRaPaGOtHci-7dSxs.roa File: y9kIUKoRWMPRaPaGOtHci-7dSxs.roa (raw, json) Hash identifier: I+VrN/+ACRL83W/qLs4DPft1AfKI6Ejc0/atKksSGCI= Subject key identifier: CB:D9:08:50:AA:11:58:C3:D1:68:F6:86:3A:D1:DC:8B:EE:DD:4B:1B Certificate issuer: /CN=870c589a4f22a9ca2ff99b4c48f8bdf492871725 Certificate serial: 019B79EBE129E698A7792FEC0B77D4840815 Authority key identifier: 87:0C:58:9A:4F:22:A9:CA:2F:F9:9B:4C:48:F8:BD:F4:92:87:17:25 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hwxYmk8iqcov-ZtMSPi99JKHFyU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/y9kIUKoRWMPRaPaGOtHci-7dSxs.roa Signing time: Thu 01 Jan 2026 14:17:40 +0000 ROA not before: Thu 01 Jan 2026 14:17:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200724 IP address blocks: 213.33.53.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/hwxYmk8iqcov-ZtMSPi99JKHFyU.crl rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/hwxYmk8iqcov-ZtMSPi99JKHFyU.mft rsync://rpki.ripe.net/repository/DEFAULT/hwxYmk8iqcov-ZtMSPi99JKHFyU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 17:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:eb:e1:29:e6:98:a7:79:2f:ec:0b:77:d4:84:08:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=870c589a4f22a9ca2ff99b4c48f8bdf492871725 Validity Not Before: Jan 1 14:17:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cbd90850aa1158c3d168f6863ad1dc8beedd4b1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:74:9d:5c:20:e7:25:ec:41:1b:6b:65:95:e1: 58:0b:a0:d3:a6:d8:e1:40:8b:ab:7b:37:06:3b:5d: 09:2e:61:e9:4e:a1:ee:33:23:bb:e9:a2:1f:a3:cf: 0e:da:25:4a:80:7c:0b:48:27:db:4a:ac:32:fb:9e: a0:7d:03:8f:cf:0d:ca:65:fb:14:ff:d7:02:ac:95: 12:b3:68:50:5b:69:76:fc:2d:ff:4a:27:2c:cb:77: 44:b9:db:36:69:4b:f1:f7:24:d6:ca:00:73:d8:ff: 5a:c3:b5:ef:2e:fd:8b:0a:39:74:41:42:49:07:2b: 4b:91:06:a6:d0:c1:fc:ec:7a:6d:1b:1e:ce:e8:62: 2f:ee:5d:8c:96:38:7c:f2:f7:c2:33:a9:95:d5:80: 5a:37:d7:56:c9:4d:84:7d:bb:93:ae:3e:45:77:00: 7d:43:20:dd:cf:26:0e:cb:0b:62:8f:be:a1:37:4f: 74:d8:e2:f8:f7:f1:0b:39:9e:b6:2c:97:6e:6a:71: 3b:ec:7b:fc:2c:b4:71:17:3d:d3:da:89:ca:b2:0f: c8:2f:27:08:b9:aa:b2:45:77:b7:1f:5a:2c:3a:eb: f9:6d:53:bb:d0:2d:91:ff:9e:33:90:56:1d:f1:6e: ca:fb:a9:e0:02:d1:1e:7c:3b:82:b0:99:d7:c4:78: a6:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:D9:08:50:AA:11:58:C3:D1:68:F6:86:3A:D1:DC:8B:EE:DD:4B:1B X509v3 Authority Key Identifier: keyid:87:0C:58:9A:4F:22:A9:CA:2F:F9:9B:4C:48:F8:BD:F4:92:87:17:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hwxYmk8iqcov-ZtMSPi99JKHFyU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/y9kIUKoRWMPRaPaGOtHci-7dSxs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/hwxYmk8iqcov-ZtMSPi99JKHFyU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.33.53.0/24 Signature Algorithm: sha256WithRSAEncryption 84:25:eb:d1:15:b4:f6:f3:38:d5:c8:f0:32:e3:98:ad:42:3b: e7:71:97:91:9e:ad:47:56:fb:ba:0d:c0:c7:4e:22:32:78:23: 1b:94:65:ca:75:68:fc:a3:97:1d:49:49:9c:2f:5d:19:79:ad: 63:50:a6:e3:67:54:d9:f4:04:56:ad:82:90:54:21:1d:e1:65: e6:68:0c:99:be:0e:79:b4:3e:e2:ec:10:17:65:f0:23:e1:ea: 60:06:ff:6f:b9:b8:11:6d:cb:67:a5:3c:a1:b1:3c:96:b4:99: dc:f7:45:6a:75:e7:92:9a:4f:c6:c8:25:25:10:5b:e0:63:98: c0:62:0c:26:6d:42:86:b4:4b:59:b4:53:c9:84:68:c3:54:0b: f0:dd:e1:3c:5a:d1:09:a7:f7:4a:0c:51:72:ae:b6:e2:23:0d: 56:b6:6e:c6:cc:28:02:66:20:5d:65:1f:29:dc:1e:ce:5d:9c: dc:d5:4c:33:a0:c0:c9:62:d5:df:3f:8c:9e:06:e3:f2:5d:47: 22:16:98:92:78:f1:44:6c:e9:10:06:cf:12:07:87:09:88:19: 83:21:f8:56:82:db:ea:ef:fa:d3:1d:7b:68:e1:78:0b:e0:34: 35:48:b4:53:67:07:39:85:aa:3b:0b:a2:78:be:7a:fb:4e:89: 9a:ca:e6:dc -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt56+Ep5pineS/sC3fUhAgVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg3MGM1ODlhNGYyMmE5Y2EyZmY5OWI0YzQ4ZjhiZGY0OTI4 NzE3MjUwHhcNMjYwMTAxMTQxNzQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYmQ5MDg1MGFhMTE1OGMzZDE2OGY2ODYzYWQxZGM4YmVlZGQ0YjFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvXSdXCDnJexBG2tlleFYC6DTptjh QIurezcGO10JLmHpTqHuMyO76aIfo88O2iVKgHwLSCfbSqwy+56gfQOPzw3KZfsU /9cCrJUSs2hQW2l2/C3/Sicsy3dEuds2aUvx9yTWygBz2P9aw7XvLv2LCjl0QUJJ BytLkQam0MH87HptGx7O6GIv7l2Mljh88vfCM6mV1YBaN9dWyU2EfbuTrj5FdwB9 QyDdzyYOywtij76hN0902OL49/ELOZ62LJduanE77Hv8LLRxFz3T2onKsg/ILycI uaqyRXe3H1osOuv5bVO70C2R/54zkFYd8W7K+6ngAtEefDuCsJnXxHim3QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMvZCFCqEVjD0Wj2hjrR3Ivu3UsbMB8GA1UdIwQY MBaAFIcMWJpPIqnKL/mbTEj4vfSShxclMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaHd4WW1rOGlxY292LVp0TVNQaTk5SktIRnlVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC9mNTA1YjUtMGU0Ni00YjNmLWJmMWIt ODQ5ZDNhNmI5YzJkLzEveTlrSVVLb1JXTVBSYVBhR090SGNpLTdkU3hzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZC9mNTA1YjUtMGU0Ni00YjNmLWJmMWItODQ5ZDNhNmI5YzJk LzEvaHd4WW1rOGlxY292LVp0TVNQaTk5SktIRnlVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1SE1MA0G CSqGSIb3DQEBCwUAA4IBAQCEJevRFbT28zjVyPAy45itQjvncZeRnq1HVvu6DcDH TiIyeCMblGXKdWj8o5cdSUmcL10Zea1jUKbjZ1TZ9ARWrYKQVCEd4WXmaAyZvg55 tD7i7BAXZfAj4epgBv9vubgRbctnpTyhsTyWtJnc90VqdeeSmk/GyCUlEFvgY5jA YgwmbUKGtEtZtFPJhGjDVAvw3eE8WtEJp/dKDFFyrrbiIw1Wtm7GzCgCZiBdZR8p 3B7OXZzc1UwzoMDJYtXfP4yeBuPyXUciFpiSePFEbOkQBs8SB4cJiBmDIfhWgtvq 7/rTHXto4XgL4DQ1SLRTZwc5hao7C6J4vnr7Tomayubc -----END CERTIFICATE-----Generated at Tue Jan 27 02:50:12 2026 by rpki-client